ambari 卸载smartsense

在启动SmartSense时遇到证书错误,尝试手动创建证书并使用openssl命令仍然失败,错误提示为证书密码不正确。尝试通过禁用Python标准库的证书验证未解决问题。最终决定卸载SmartSense,通过Ambari REST API进行服务的停止、卸载和删除。
摘要由CSDN通过智能技术生成

启动smartsense的时候报错:

2021-10-20 11:00:34,912  INFO [main] CertificateManager:86 - Initialization of root certificate
2021-10-20 11:00:34,912  INFO [main] CertificateManager:88 - Certificate exists:false
2021-10-20 11:00:34,912  INFO [main] CertificateManager:153 - Generation of server certificate
2021-10-20 11:00:34,914  INFO [main] Configuration:569 - Reading password from existing file
2021-10-20 11:00:34,984  WARN [main] CertificateManager:345 - Command openssl genrsa -des3 -passout pass:**** -out /var/lib/smartsense/hst-server/keys/ca.key 4096 -md sha256 was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:34,991  WARN [main] CertificateManager:345 - Command openssl req -passin pass:**** -new -key /var/lib/smartsense/hst-server/keys/ca.key -out /var/lib/smartsense/hst-server/keys/ca.csr -batch was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:34,997  WARN [main] CertificateManager:345 - Command openssl ca -create_serial -out /var/lib/smartsense/hst-server/keys/ca.crt -days 365 -keyfile /var/lib/smartsense/hst-server/keys/ca.key -key **** -selfsign -extensions jdk7_ca -config /var/lib/smartsense/hst-server/keys/ca.config -batch -md sha256 -infiles /var/lib/smartsense/hst-server/keys/ca.csr was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:35,002  WARN [main] CertificateManager:345 - Command openssl pkcs12 -export -in /var/lib/smartsense/hst-server/keys/ca.crt -inkey /var/lib/smartsense/hst-server/keys/ca.key -certfile /var/lib/smartsense/hst-server/keys/ca.crt -out /var/lib/smartsense/hst-server/keys/keystore.p12 -password pass:**** -passin pass:**** 

 was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:35,021  INFO [main] Configuration:569 - Reading password from existing file
2021-10-20 11:00:35,054  WARN [main] ConfigChangeListener:155 - Creating a patch
2021-10-20 11:00:35,365  INFO [main] ConfigChangeListener:236 - Patch created : /var/lib/smartsense/hst-server/updates/upload/config-update.tgz
2021-10-20 11:00:35,431  INFO [main] SupportToolServer:580 - Bundle Purge Scheduler enabled at :Wed Oct 20 11:00:35 CST 2021. Bundle Purge job will run every 24 hrs.
2021-10-20 11:00:35,436  INFO [main] Server:266 - jetty-7.6.7.v20120910
2021-10-20 11:00:35,479  INFO [Thread-1] DomainRule:135 - Failed to detect the domain name from FQDN apm-cdh03
2021-10-20 11:00:35,483  INFO [main] ContextHandler:744 - started o.e.j.s.ServletContextHandler{/,file:/usr/hdp/share/hst/hst-server/web/}
2021-10-20 11:00:36,607  INFO [main] AbstractConnector:338 - Started SelectChannelConnector@0.0.0.0:9000
2021-10-20 11:00:36,608  INFO [main] Server:266 - jetty-7.6.7.v20120910
2021-10-20 11:00:36,609  INFO [main] ContextHandler:744 - started o.e.j.s.ServletContextHandler{/,null}
2021-10-20 11:00:37,046  WARN [main] AbstractLifeCycle:204 - FAILED SslContextFactory@6af5b246(/var/lib/smartsense/hst-server/keys/keystore.p12,/var/lib/smartsense/hst-server/keys/keystore.p12): java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
    at java.io.FileInputStream.open0(Native Method)
    at java.io.FileInputStream.open(FileInputStream.java:195)
    at java.io.FileInputStream.<init>(FileInputStream.java:138)
    at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:282)
    at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
    at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyStore(SslContextFactory.java:1053)
    at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1013)
    at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:264)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at org.eclipse.jetty.server.ssl.SslSelectChannelConnector.doStart(SslSelectChannelConnector.java:612)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at org.eclipse.jetty.server.Server.doStart(Server.java:286)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at com.hortonworks.support.tools.server.SupportToolServer.run(SupportToolServer.java:292)
    at com.hortonworks.support.tools.server.SupportToolServer.main(SupportToolServer.java:630)
2021-10-20 11:00:37,050  WARN [main] AbstractLifeCycle:204 - FAILED SslSelectChannelConnector@0.0.0.0:9440: java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
    at java.io.FileInputStream.open0(Native Method)
    at java.io.FileInputStream.open(FileInputStream.java:195)
    at java.io.FileInputStream.<init>(FileInputStream.java:138)
    at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:282)
    at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
    at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyStore(SslContextFactory.java:1053)
    at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1013)
    at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:264)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at org.eclipse.jetty.server.ssl.SslSelectChannelConnector.doStart(SslSelectChannelConnector.java:612)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at org.eclipse.jetty.server.Server.doStart(Server.java:286)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
    at com.hortonworks.support.tools.server.SupportToolServer.run(SupportToolServer.java:292)
    at com.hortonworks.support.tools.server.SupportToolServer.main(SupportToolServer.java:630)
2021-10-20 11:00:37,096  INFO [main] ContextHandler:795 - stopped o.e.j.s.ServletContextHandler{/,file:/usr/hdp/share/hst/hst-server/web/}

尝试手动解决:
openssl genrsa -des3 -passout pass:Admin21cn -out /var/lib/smartsense/hst-server/keys/ca.key 4096
openssl req -passin pass:Admin21cn -new -key /var/lib/smartsense/hst-server/keys/ca.key -out /var/lib/smartsense/hst-server/keys/ca.csr
openssl ca -create_serial -out /var/lib/smartsense/hst-server/keys/ca.crt -days 365 -keyfile /var/lib/smartsense/hst-server/keys/ca.key -key Admin21cn -selfsign -extensions jdk7_ca -config /var/lib/smartsense/hst-server/keys/ca.config -batch -md sha256 -infiles /var/lib/smartsense/hst-server/keys/ca.csr
openssl pkcs12 -export -in /var/lib/smartsense/hst-server/keys/ca.crt -inkey /var/lib/smartsense/hst-server/keys/ca.key -certfile /var/lib/smartsense/hst-server/keys/ca.crt -out /var/lib/smartsense/hst-server/keys/keystore.p12 -password pass:Admin21cn -passin pass:Admin21cn


仍然报错,证书的密码有问题:
2021-10-20 11:43:58,152  WARN [main] AbstractLifeCycle:204 - FAILED SslSelectChannelConnector@0.0.0.0:9440: java.io.IOException: keystore password was incorrect
java.io.IOException: keystore password was incorrect
Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
    ... 13 more
java.io.IOException: keystore password was incorrect

关闭python标准库http客户端中的证书验证:https://access.redhat.com/articles/2039753#controlling-certificate-verification-7
/etc/python/cert-verification.cfg
[https]
verify=disable

仍然解决不了问题。看某些博客提到这个东西应该是收费的,没太了解。

也用不到这个组件,于是卸载算了。

curl -u admin:admin -i -H 'X-Requested-By: ambari' -X PUT -d '{"RequestInfo": {"context" :"Stop SmartSense via REST"}, "Body": {"ServiceInfo": {"state": "INSTALLED"}}}' http://172.18.8.14:8080/api/v1/clusters/testBigData/services/SMARTSENSE


curl -u admin:admin -i -H 'X-Requested-By: ambari' -X POST -d '{"RequestInfo": {"context" :"Uninstall SmartSense via REST", "command":"Uninstall"}, "Requests/resource_filters":[{"hosts":"comma separated host names", "service_name":"SMARTSENSE", "component_name":"HST_AGENT"}]}' http://172.18.8.14:8080/api/v1/clusters/testBigData/requests


curl -u admin:admin -H 'X-Requested-By: ambari' -X DELETE http://172.18.8.14:8080/api/v1/clusters/testBigData/services/SMARTSENSE

 https://docs.cloudera.com/HDPDocuments/SS1/SmartSense-1.1.0/bk_smartsense_admin/content/ch01s02s05s05.html

卸载Kerberos后导致tez.am.view-acls参数消失的情况可能涉及到Ambari的源码。Ambari是一个开源的集群管理工具,用于部署、配置和管理Hadoop生态系统中的各种组件,包括Tez。 在Ambari中,配置参数的管理和持久化是通过Ambari ServerAmbari Agent之间的通信来实现的。当进行Kerberos卸载操作时,可能会触发Ambari相关的源码执行以下步骤: 1. Ambari Server接收到卸载Kerberos的请求。 2. Ambari Server通过与Ambari Agent的通信,将卸载Kerberos的指令发送给对应的主机。 3. Ambari Agent在主机上执行相应的操作,包括修改配置文件、删除相关的Kerberos配置等。 4. 在这个过程中,可能出现了错误或不完整的操作,导致tez.am.view-acls参数被错误地删除或修改。 具体而言,可能涉及到以下源码文件和逻辑: 1. Ambari Server源码:在Ambari Server的源码中,可能涉及到处理卸载Kerberos请求的逻辑。这涉及到与Ambari Agent的通信和指令传递,以及对主机上配置文件的修改等操作。 2. Ambari Agent源码:在Ambari Agent的源码中,可能涉及到接收和执行卸载Kerberos指令的逻辑。这可能包括对tez-site.xml文件进行修改或删除相关配置参数的操作。 3. 相关配置文件:tez-site.xml是Tez的配置文件之一,其中包含了tez.am.view-acls参数的配置。在卸载Kerberos的过程中,Ambari可能会修改或删除这个配置文件中与Kerberos相关的配置,导致tez.am.view-acls参数消失。 需要注意的是,具体的源码实现可能因Ambari版本和定制修改而有所不同。如果遇到该问题,建议参考Ambari官方文档、社区讨论或联系Ambari开发团队以获取更准确的源码分析和解决方案。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值